IOC Radar
IPHighVerifiedSignal 86/100

217.154.212.25

Location
GermanyGermany
Berlin, State of Berlin
ASN
AS8560
IONOS SE
First Seen
Jun 2, 2026
Last Seen
Jun 16, 2026
Jun 2
First Seen
24d ago
Jun 16
Last Seen
11d ago
283
Reports
source reports
95%
Confidence
high
Found in 283 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes

Network Information

CountryDEGermany
RegionBerlin, State of Berlin
ASNAS8560
OrganizationIONOS SE

IP Category

Hosting
Hosting provider

Feed Intelligence Summary

283 reports95% confidence
AT
Abuse.ch ThreatFox
Jun 16, 2026
2913 IOCs in report
AT
Abuse.ch ThreatFox
Jun 16, 2026
2914 IOCs in report
AT
Abuse.ch ThreatFox
Jun 16, 2026
2911 IOCs in report
AT
Abuse.ch ThreatFox
Jun 15, 2026
2911 IOCs in report
AT
Abuse.ch ThreatFox
Jun 15, 2026
2907 IOCs in report
AT
Abuse.ch ThreatFox
Jun 15, 2026
2909 IOCs in report
AT
Abuse.ch ThreatFox
Jun 15, 2026
2901 IOCs in report
AT
Abuse.ch ThreatFox
Jun 15, 2026
2874 IOCs in report
AT
Abuse.ch ThreatFox
Jun 15, 2026
2884 IOCs in report
AT
Abuse.ch ThreatFox
Jun 15, 2026
2881 IOCs in report

Activity Timeline

283 total obs
Jun 16Jun 2

Threat Activity Heatmap

· Peak: 2026-06-08
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
283
Critical
3mo
283
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
283
Reports
First seenJun 2, 2026
Last seenJun 16, 2026
Verified IOC
GeolocationDE
CountryGermany
LocationBerlin, State of Berlin
ASNAS8560
OrgIONOS SE
Coords52.5200, 13.4050
Hosting

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 24 days ago · Last seen 11 days ago
Appeared in 283 threat reports from 10 sources
Associated with: Kimsuky, Turla, Play, Hive, Sandworm
Used by malware: Lumma, Pegasus, SocGholish, XMRig, Remcos, Rhysida, NjRAT, NetWire, Nanocore, WannaCry, AsyncRAT, Dridex, XorDDoS, XWorm, Cobalt Strike, PowerShell Empire, RedLine, Havoc, Sliver, Hive, Bumblebee, Gootloader, META Stealer, Gh0st RAT, Play, Stealc, Mirai, Vidar, Metasploit